Senior Data Loss Prevention (DLP) Architect, Engineer

Brown Brothers Harriman

Senior Data Loss Prevention Architect & Engineer handling enterprise DLP architecture and solutions for BBH's cybersecurity team. Responsible for DLP implementations and collaborations across legal, risk, and compliance teams.

Posted 7/23/2026full-timeJersey City • New Jersey, Pennsylvania • 🇺🇸 United StatesSenior💰 $110,000 - $160,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Expertise in Data Loss Prevention (DLP) architecture and engineering, with a strong focus on network and endpoint solutions. Proven ability to design, implement, and optimize DLP policies and incident response workflows in large enterprise environments.

Highest-signal resume keywords

Data Loss Prevention ArchitectureZscaler DLPDLP Policy DevelopmentInformation Security LeadershipAutomation Workflows

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

DLP Solution DeploymentNetwork DLPEndpoint DLPEvent Monitoring PipelinesPolicy Effectiveness ReviewsFalse-Positive TuningData Classification FrameworksIncident TriageSIEM IntegrationDLP Documentation

Soft Skills

Excellent Communication Skills

Certifications & Qualifications

CISSPCISMCCSPGIACSecurity+

Industry Keywords

Information SecurityData Loss PreventionEnterprise EnvironmentsCloud ChannelsEndpoint Agents

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Contribute to the design and continuous improvement of the enterprise DLP architecture across network, endpoint, email, and cloud channels
Deploy, configure, tune, and document DLP solutions across network egress points (web proxy, email gateway, API channels) and endpoint agents at enterprise scale
Support the development of DLP policies aligned with data classification frameworks and labeling taxonomies across all data channels
Conduct regular policy effectiveness reviews and false-positive tuning sessions
Engineer end-to-end event monitoring pipelines, integrating DLP alert telemetry into SIEM platforms for correlation, enrichment, and dashboarding
Develop automation workflows and playbooks to accelerate DLP incident triage, notification, and response.

Requirements

What you’ll need

8+ years of progressive experience in information security
minimum of 5 years focused on Data Loss Prevention architecture, engineering, and operational leadership in large enterprise environments
demonstrated experience in designing, implementing, and optimizing both network DLP (web, email, cloud) and endpoint DLP (agent-based, EDR integrated) across large enterprise environments
Zscaler DLP - Required
Excellent written and verbal communication skills
Bachelor's degree in Computer Science, Information Security, Information Technology, or a related technical discipline required
Relevant industry certifications are highly desirable, including but not limited to CISSP, CISM, CCSP, GIAC, Security+, or vendor-specific DLP certifications.

Benefits

Comp & perks

Base salary
discretionary bonuses
profit-sharing
healthcare
professional development opportunities